Using Let's Encrypt SSL certificates with HostEurope Webhosting products
HostEurope currently doesnât offer automatic usage of Letâs Encrypt SSL certificates with their Webhosting products â and probably never will. But hereâs how you can make it work and navigate HostEuropeâs manual and not so straight forward process.
To host my own videos, I needed HTTPS/SSL support for the domain I serve the files from. Because otherwise Chrome (and probably quite a few other browsers or clients) wouldnât serve them, since it refuses to serve âmixed contentâ, i.e. webpage resources from both HTTP-URL and HTTPS-URL sources. And since I still have large amounts of simple webspace with HostEurope, I chose to put that to good use for this scenario. Before long, Iâll probably automate the process somehow; and I guess that means moving to another hoster that does offer Letâs Encrypt integration.
Anyhow, you can upload your own certificate files for your various domains and subdomains via their âKunden-Informations-Systemâ (KIS). But I found this process to be not very customer-friendly or helpful when something went wrong. And their help pages were of no help either. So, I wanted to write down the necessary steps â mainly for own future self.
How to enable Letâs Encrypt certificates for HostEuropeâs Webhosting products
So, hereâs how to do it:
- Install certbot on your local machine. On macOS, I use homebrew:
brew install certbot
. - Generate a new certificate locally for the domain you need it for:
sudo certbot certonly --manual
.1 - Follow the instructions. Afterwards one certificate file and one private key file will have been created.
- Copy the files to a desired location on your hard drive. (Optional)2
- Change the file extension of both files from
.pem
to.txt
.3 - Make sure the permissions of both files allow reading:
[sudo] chmod +r fullchain.txt privkey.txt
. - Navigate to the form in HostEuropeâs KIS:
- âWebhostingâ -> Hit âConfigureâ (âKonfigurierenâ in German) for your webhosting product.
- âSecurity & SSLâ (âSicherheit & SSLâ)
- âManage SSLâ (âSSL Administrierenâ)
- Choose âAddâ (âHinzufĂźgenâ) or âReplaceâ (âErsetzenâ) for the relevant subdomain.
- âCertificatâ file input: add your fullchain.txt file.
- âKeyâ file input: add your privkey.txt file.
- Hit âSendâ.
In case something goes wrong without a proper error message and a page couldnât be opened, please check your files. Make sure they contain only a single certificate string, and have the correct .txt
file extension.
If the upload succeeds, youâll get the appropriate confirmation message and your (sub)domain is now secured by a Letâs Encrypt SSL certificate and can be requested via HTTPS-links.
When you need to renew your certificate before it expires (after three months), go through the exact same process again.
Helpful links:
- https://www.hosteurope.de/blog/lets-encrypt-zertifikat-erstellen/#comment-23288
- https://www.hosteurope.de/faq/software-services/ssl-zertifikate/ssl-zertifikat-einbinden-webhosting/
-
WARNING: if youâve done this before â maybe because you are renewing your certificates â the current version of certbot will prepend the certificate string to any previous ones in theUpdate: as far as I found out now, this is not true. Usually you usefullchain.pem
file. Make sure to edit the file afterwards to only contain the latest certificate (which should be the first in that file).fullchain.pem
file, which contains all intermediate certs necessary. See: https://certbot.eff.org/docs/using.html#where-are-my-certificates. ↩ -
Iâd like to put them somewhere logical, where I can find them again in the future, if I need to.)Â ↩
-
This is important, because the upload form (see next steps) expect them this way â and which is not really documented or obvious. ↩